ActionRank
Check your actions

Golangci-lint

Actively maintained

golangci/golangci-lint-action · MIT

Official GitHub Action for golangci-lint from its authors

★ 1.4k starsLast commit todayLatest v9.3.0
B
78
/ 100
Security 74Maintenance 96Popularity 63Reliability 70

Security signals

OpenSSF Scorecard7.4 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0

Mutable tags like v9.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0

Score breakdown

Security (35%)74
Popularity (20%)63
Maintenance (30%)96
Reliability (15%)70